Extracted

• • Target
    fecacbf86f6b5fad795ee8bf686e122a56c4ad7899811.exe
  • Size 333KB
  • SHA256 fecacbf86f6b5fad795ee8bf686e122a56c4ad789981165215bf70bdeee8f35e
  • MD5 2daf3525bef8150126eb8d839f51bb7c
  • SHA1 e95f2148696e23a2efc6724c6c1dbe88d0a482e7
  • SHA512 4fcd1f2d66da5116408c390e4b5b2071d9cf371b0561a3a8009292afa8be8d1225fadcb2687ebf9c2a0d2e20c3492f7c60e5ef7849bdad50e3be1b02d418283f
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinesewpalpadindiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2